Curling

@Faraday9 said:
I can not for the life of me figure out how to pull data from the P*******_P file.
I’ve tried x
, B*n
p
, Fe, GZ*p.
I am getting nowhere. ;~;

I’m having trouble at the same point. Our x* d commands looks pretty much the same. I just can’t correctly rebuild the b* 2. Appreciate and nudges in any direction :wink:

***duplicate comment…

@bitlyfe said:

@Faraday9 said:
I can not for the life of me figure out how to pull data from the P*******_P file.
I’ve tried x
, B*n
p
, Fe, GZ*p.
I am getting nowhere. ;~;

I’m having trouble at the same point. Our x* d commands looks pretty much the same. I just can’t correctly rebuild the b* 2. Appreciate and nudges in any direction :wink:

same here… any clue?
:anguished:

I know the CMS is widely used, but this is actually the first time I’ve worked on a box with it. Just got admin access to the site and I hope to learn a lot about how to attack it

@cbx said:

@bitlyfe said:

@Faraday9 said:

same here… any clue?
:anguished:

PM me if you are stuck with that file.

@TazWake said:

@cbx said:

@bitlyfe said:

@Faraday9 said:

same here… any clue?
:anguished:

PM me if you are stuck with that file.

@TazWake said:

@cbx said:

@bitlyfe said:

@Faraday9 said:

same here… any clue?
:anguished:

PM me if you are stuck with that file.

Thanks heaps! Got user.txt, working on getting that root.txt now.

I was already able to get that root.txt but currently stuck on getting the shell.

Im trying to get root and i have no idea how to continue. im guessing i have to edit the in*** file and that would change the re*** file but im not sure how to do that.

I am about to give up, but I really don’t want to! I am at a complete loss and need some references. I would prefer a path to tools or documentation and not straight spoilers. I (think I) have the username from the main page, but I have no idea how to progress from there. I like to think that I am pretty decent at the Google foo, but this is kicking my ■■■. Any help is appreciated.

Hello , I’m hitting my head on how to find the credentials for the users , even with the hint I don’t find the txt in the source code. someone can help me please ?

@sekeita said:
Hello , I’m hitting my head on how to find the credentials for the users , even with the hint I don’t find the txt in the source code. someone can help me please ?

PM’d you, hope it helps.

Guys, someone please give me some direction…
I’ve got the user and now playing with input and listening…but don’t know exactly what to look for…
PM or reply is really appreciate.

Hello profs, I need some hint to get root.txt without getting root shell. I know whats going on and which process are wirting input and report. But I can’t figure out how to use this commands to get root.txt as user f…s. Any help via PM is welcome. Thanks in advance.

Hi! Stuck right before root. Same problem as @Schnuffi. I know what to do, but I don’t know how. I just read c*rl manual, and didn’t find any clues. Google didn’t help me at all.
Any PM with help is welcome, hint, maybe an article, or link about this case.

anyone can give a heads up regarding root? i think i maybe know what’s going on but could use some advice

Thanks to @L4mpje for stating something I easily discarded. Hint: You CAN edit some files, it’s just a matter of how. I got root flag without privesc. Now, trying to do privesc, for the heck of it :wink:

New here on HTB; thought I’d try an easy box; user was doable but root access is hard - for me. Appreciate any hints on how to continue via DM. Tx.

It’s a bit annoying that I have to say this but, just because I posted in this forum that I got root doesn’t mean I was opening myself to DMs for hints. Please, if someone doesn’t say “DM me for hints” do not spam that person for hints. I don’t come ot HTB forums very often, that’s why I didn’t offer hints for this box, so please, stop DM’ing me.

any help on root would be helpful, im not sure how i what to change the i**** file

Did something on this box change? I used a component on the website as my first entry point, stepped away for a bit, and came back and the component was no longer there. I even requested a reset on the box and it seemed to go down and back up, but the component is still not there. Anyone else know what I’m talking about?